Hack In The Box Security Conference Courses

Hunting Windows Desktop Window Manager Bugs

Exploring Windows Desktop Window Manager vulnerabilities, focusing on DirectComposition UserSpace. Covers architecture, attack surfaces, and specific CVEs, offering insights into bug hunting techniques and security implications.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

SOHO Hacking at Pwn2Own

Exploring vulnerabilities in home routers and small business devices, detailing methodologies for finding and exploiting security flaws, and demonstrating real-world attack scenarios in SOHO networks.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Next Generation Virtualization-Based Obfuscators

Explores next-gen virtualization-based code obfuscation techniques, focusing on target-specific instruction sets and intertwined VM components to enhance resilience against deobfuscation attacks.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Nakatomi Space - Lateral Movement as L1 Post-Exploitation in OT

Explore lateral movement techniques in OT networks, focusing on vulnerabilities in L1 devices. Learn about BPCS/SIS architectures, exploit chains, and hardening strategies to enhance industrial control system security.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Syscalls in Shellcode - Techniques for Malicious Functionality

Explore advanced techniques for using Windows syscalls in shellcode, overcoming portability issues, and enhancing malicious functionality. Learn about ShellWasp tool and novel WoW64 syscall invocation methods for stealthy code execution.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

XRP Raid Protector - Killing A Critical Bug Worth 40 Billion Dollars

Unveiling a critical 8-year-old vulnerability in XRP Ledger that could compromise $40 billion in assets. Explores the RCE exploit, potential profit methods, and network control implications for blockchain security.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Current State of iOS Malware Detection

Comprehensive overview of iOS malware detection techniques, covering known samples, automated and manual detection methods, and potential improvements for enhanced security.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Upgrading Rollback Agnostic Replay Attacks

Explore car hacking techniques, focusing on radio frequencies and BLE. Learn about Rolling Codes analysis and practical steps to conduct research on vehicle security vulnerabilities.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

The Return of Stack Overflows in the Linux Kernel

Exploiting Linux kernel vulnerabilities: techniques for bypassing security controls, leveraging nftables bugs, and achieving code execution. Includes mitigation strategies and a novel per-softirq stack randomization implementation.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Feeding Gophers to Ghidra

Improve Golang binary analysis in Ghidra with Java-based scripts. Recover strings, functions, and types for efficient malware research and vulnerability detection.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Exploring JARM – An Active TLS Fingerprinting Algorithm

Exploring JARM: An active TLS fingerprinting algorithm for clustering servers, identifying default settings, and detecting malicious servers. Includes C++ implementation, technical analysis, and improvements to enhance fingerprint confidence.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Red Wizard – A User-friendly Infrastructure For Red Teams

Introducing Red Wizard: An open-source tool for automated, OPSEC-safe Red Team infrastructure deployment. Streamlines setup with user-friendly wizards, self-documentation, and resilient architecture for efficient cybersecurity testing.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Nomadic Honeypots - How To Create Actionable CTI

Explore Automated Moving Target Defense using nomadic honeypots to create actionable Cyber Threat Intelligence. Learn deception techniques, attacker behaviors, and how to reduce attack surfaces while generating valuable threat insights.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

Evolution of Learning - What Cyber Security Training Looks Like in 2023

Explore the evolution of cybersecurity training with expert trainers discussing market changes, pandemic impact, specialized courses, and tips for career advancement in this insightful panel discussion.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

The Myths of Software Security

Exposé of common software security myths, debunking industry surveys, best practices, and popular concepts like "shift left" and SBOMs. Challenges conventional wisdom with evidence-based insights.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk